Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: kbIFXQY/sTrpv87E+irtx3VGtnppLMhhxdM5aqqdi7I=
Subject key identifier: 90:23:91:1B:46:24:25:B2:03:CA:BB:54:F2:16:C0:B1:33:90:8F:AB
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 019D2584272EDD84444C8AEDC7B5A1CDF9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0DE0
Signing time: Wed 25 Mar 2026 15:01:50 +0000
Manifest this update: Wed 25 Mar 2026 15:01:50 +0000
Manifest next update: Thu 26 Mar 2026 15:01:50 +0000
Files and hashes: 1: Jyr3qQaLkuFGdzyQkxaiY8QG9Zk.roa (hash: +0lMWS/2H1/8Ey92DgxBFaeX3VGewzw1q8R4yOnjB60=)
2: tFNoCvw9HYCrtZV5yr-M-6rUHmA.roa (hash: Xnq4r13lagE2sQ4IPeUB5jj7VyVhoMHz0umUI4YNTLY=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: sRaJTW/IBakImYloQqFG19LHNYVGyIwMsocvTskAZkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:27:2e:dd:84:44:4c:8a:ed:c7:b5:a1:cd:f9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Mar 25 15:01:50 2026 GMT
Not After : Mar 26 15:01:50 2026 GMT
Subject: CN=9023911b462425b203cabb54f216c0b133908fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:ab:67:5c:2f:f8:b4:35:01:a9:13:89:e3:
48:d7:eb:b8:6e:8a:ce:03:d0:7e:2d:ba:1b:40:ac:
eb:f7:8f:76:b0:15:b8:c1:ac:71:37:f2:f9:19:4b:
f2:48:50:97:79:c5:9e:bc:67:38:c6:5b:89:2a:74:
83:a4:e8:12:a2:85:19:a0:c8:95:56:b7:f6:2d:1f:
7a:95:4d:c9:e9:4c:11:6c:3d:6e:85:bb:e6:13:2c:
5b:b8:51:4e:fc:cf:44:b1:37:28:d0:7a:9a:ec:39:
d1:8f:0d:9f:72:8b:d2:8b:bf:e4:b7:9b:30:ef:6b:
5c:3f:d5:28:1f:1c:a7:ea:cc:14:5a:e9:3d:49:b2:
5f:3d:45:8b:d6:e3:77:b6:de:3d:b3:56:50:fb:35:
b4:29:84:fb:10:e5:ac:83:27:42:37:22:20:12:8d:
56:bb:45:63:8d:80:8b:1c:60:6f:4f:79:01:63:03:
3c:71:c0:3a:88:88:77:1f:cd:40:38:5c:4a:fd:b7:
0f:b3:e3:0a:4f:62:40:b2:a7:f0:44:6c:1e:58:f5:
14:33:7a:6f:de:23:02:17:8b:cc:0d:1f:68:23:08:
74:fe:27:72:ab:38:f2:c3:a3:ed:92:f7:cf:24:f1:
f8:fd:5d:78:61:92:34:be:98:d2:1a:4d:8c:83:ac:
7c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:23:91:1B:46:24:25:B2:03:CA:BB:54:F2:16:C0:B1:33:90:8F:AB
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:13:27:c3:48:d3:83:be:fd:f5:63:47:72:ac:e7:d9:b6:b6:
06:97:3c:10:cd:e7:98:c7:b2:3a:c3:6e:25:18:83:31:fe:af:
c3:46:9d:29:04:69:3d:92:b4:28:c6:b6:82:0c:4f:eb:6c:e0:
cf:91:49:b0:82:f4:69:d6:17:e9:c2:ff:6c:36:4d:ac:32:e0:
02:95:01:44:cb:a3:b3:83:e3:99:69:bb:65:d8:83:e3:0e:78:
87:59:a3:48:3c:52:ac:8d:10:d0:64:61:a1:27:a5:23:c5:dd:
5f:c1:97:89:90:ab:39:f1:3b:df:c7:4c:92:25:d3:a4:9e:6e:
28:c0:68:d9:8c:ee:8f:d0:b5:fa:81:ec:43:22:f8:17:1d:6c:
87:63:17:cf:ce:7e:62:dd:dc:0f:d2:fe:89:99:54:00:7e:1a:
79:ae:8a:9e:23:d5:54:63:4f:08:c7:cb:74:06:da:d7:2f:79:
46:75:d5:0a:47:b1:27:64:80:89:27:0c:37:e4:09:63:31:09:
70:e3:2a:ba:c9:49:be:cd:d6:52:12:04:33:c7:ab:c1:98:db:
5c:d9:ef:e8:0e:44:0e:fc:7c:da:4f:e9:45:24:fb:0e:b6:d1:
e8:c8:5d:29:33:b7:9f:93:84:14:5a:41:b6:ff:51:57:46:c1:
f9:87:ad:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:33:45 2026 by rpki-client